Dutch police disrupts botnet composed of 17 million devices

A batch of security news: Dutch authorities disrupted 200 servers controlling a botnet infecting an estimated 17 million devices. Attackers are actively exploiting a FortiClient EMS improper access control vulnerability (CVE-2026-35616) to deliver a broad-spectrum infostealer via forged Fortinet endpoint updates and FortiClient-managed VPN scripting workflows. Researchers demonstrated FROST, an OPFS-based SSD timing technique that lets websites infer user activity from SSD behavior, creating a new privacy/fingerprinting vector. A LinkedIn-themed phishing campaign is abusing Adobe’s A/B testing